2026-11-10
Unauthorized access to Mitsui Direct General Insurance's website (about 234,000 records): names, addresses and vehicle details leaked — what people who got a quote or bought a policy should do
On November 6, 2026, Mitsui Direct General Insurance Co., Ltd. announced that a third party had gained unauthorized access to its website and that part of its customer information had leaked. It detected the access early on November 4 and has suspended all procedures on its website and app. The affected people are customers who got a quote or took out a policy, about 234,000 records (as of 13:00 on November 6). The leaked items are policyholder and named-insured information (name, address, phone number, date of birth, email address and so on), vehicle information (vehicle name, registration number, owner and so on), and policy terms and coverage. Credit card information, bank account information and My Page login passwords are not included. On November 9 the company separately reported a follow-up on unauthorized access to the server of its roadside-assistance contractor: about 45,000 customers (as of 09:00 on November 6), and this one includes bank account information. As of November 10, 2026, no cause has been disclosed. This site's bottom line: a message using the Mitsui Direct name is not genuine just because it knows your address, vehicle or policy details. Do not open links in messages that arrive while procedures are suspended; check the official site or the contact line.